Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: JJPkjHdBLJPNSjpCntm0X6YS8T25/5zXl/O6QSmMkJc=
Subject key identifier: 14:DF:7C:A8:36:80:DF:CA:FC:40:04:1C:D7:4E:9F:73:86:7B:AE:42
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 019D397832113B1681140D3CE3A3D5E2979B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 091F
Signing time: Sun 29 Mar 2026 12:01:11 +0000
Manifest this update: Sun 29 Mar 2026 12:01:11 +0000
Manifest next update: Mon 30 Mar 2026 12:01:11 +0000
Files and hashes: 1: FxpOpLtK88tsOun050YE0ZfdIDo.roa (hash: +btXumZU2TUmANl1EByq4FAyXjWIcRex9I8hhT7VPvA=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: Bmc2N4Yt19hERxQNOT7pwXUwzlLsozoIOrFRmIB7FYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:32:11:3b:16:81:14:0d:3c:e3:a3:d5:e2:97:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Mar 29 12:01:11 2026 GMT
Not After : Mar 30 12:01:11 2026 GMT
Subject: CN=14df7ca83680dfcafc40041cd74e9f73867bae42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:90:77:40:1c:93:ab:e0:49:48:db:71:fb:
4b:08:35:13:d3:d2:58:c5:0f:09:d7:31:4f:99:cb:
4c:f6:fa:18:cb:51:bc:e8:b9:fb:d5:2f:88:3e:06:
e1:0f:93:95:b5:23:04:a1:9c:80:01:99:3c:c2:92:
10:02:4f:09:15:71:85:b8:5b:b9:b9:9c:81:f7:07:
b0:83:69:1e:8a:94:12:d7:d3:be:ba:58:82:d1:9e:
7a:2e:50:c6:79:41:68:69:86:e0:e6:a0:47:a2:c3:
fc:cf:01:2b:68:d8:cc:68:66:28:6e:95:2c:33:af:
b1:ff:80:87:31:a6:a4:ca:6d:ae:10:5d:bd:fe:d8:
90:c5:13:79:91:1b:16:b7:ff:c4:ac:42:66:84:1b:
08:3e:8d:50:d5:93:9d:f2:57:b1:b5:df:55:dd:62:
fc:a1:85:4c:98:13:6f:3a:80:d5:24:f7:6c:14:5b:
f5:28:f0:cf:5c:2a:3f:32:50:e5:bc:54:f5:f9:a2:
1f:ae:5b:fd:8e:46:0e:db:f0:27:41:a6:ca:d2:80:
cb:11:10:c7:4c:ea:9a:b4:61:54:ac:4a:e8:e6:96:
a7:91:22:f4:75:d5:75:f3:d2:cb:df:1c:3a:db:69:
52:73:7e:c3:3d:2b:d1:c5:f1:85:8f:ca:24:52:12:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:7C:A8:36:80:DF:CA:FC:40:04:1C:D7:4E:9F:73:86:7B:AE:42
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:be:3c:e2:31:7e:b3:1b:14:2e:1b:a4:d2:eb:a6:0e:8f:a5:
2c:aa:33:93:43:ae:23:3e:cc:c2:ca:e5:f6:e3:88:84:e8:f6:
bb:9e:ff:8d:6d:82:b6:1c:58:28:d5:de:d2:6b:5b:a8:04:f4:
aa:29:df:c1:e3:3d:01:40:90:98:e6:e9:b6:81:b1:74:fa:17:
71:db:cf:fd:ab:f6:49:fe:10:d3:d5:b3:64:e2:8a:33:f0:24:
ae:91:81:37:2f:64:93:72:24:24:40:90:1f:d4:a6:fe:31:43:
8d:6e:61:df:1e:88:8e:2f:82:0b:bb:e3:0e:04:18:7f:34:53:
97:23:ad:fd:bb:9d:e8:69:6a:8d:9c:a0:93:61:56:15:86:9c:
5a:ec:7c:a6:af:7c:58:3f:8a:fd:58:7e:6e:38:9a:4a:15:f2:
7a:c4:00:40:32:25:c6:ea:d9:e4:5b:d0:75:e0:69:d5:db:51:
ba:69:95:91:bc:d0:ef:a0:ba:83:e1:50:28:35:d7:1b:96:c2:
59:73:30:a4:e1:1f:8c:6e:0a:f1:db:5c:94:1a:2d:be:07:1c:
2e:e8:fd:3d:b7:ff:23:21:c9:2f:ab:5d:bb:34:bd:1b:2d:af:
1b:ce:5d:40:93:2c:3d:b4:6a:fc:0a:79:8e:bb:72:42:f2:8e:
a7:7a:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:28 2026 by rpki-client